
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File: rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier: cpi+IhEkxbAQLj7YadmT+QHVqb79EMLzqhCSfAjW+TY=
Subject key identifier: 62:67:EA:C2:79:C6:7B:92:27:54:4D:44:6C:76:90:CA:FD:CB:15:6F
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number: 76
Signing time: Thu 03 Sep 2026 08:07:20 +0000
Manifest this update: Thu 03 Sep 2026 08:07:20 +0000
Manifest next update: Thu 10 Sep 2026 08:07:20 +0000
Files and hashes: 1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: ZHutov81k57Cj29f5FyFVgFavnHO4Hr1Ja/pL5rY9jQ=)
2: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
3: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
4: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Validity
Not Before: Sep 3 08:07:20 2026 GMT
Not After : Sep 10 08:07:20 2026 GMT
Subject: CN=6a992ab8-985f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:c7:9a:cc:1a:73:71:88:9a:4d:e4:1c:76:
f9:bb:9a:a6:be:6e:be:b1:85:9a:e5:68:17:e5:5a:
cb:ae:ca:0e:d9:60:a3:c5:d5:d7:a0:61:4d:ab:44:
08:24:3c:8b:31:78:48:8d:93:26:6c:c8:de:7c:f7:
04:2f:8f:e1:3e:76:74:ac:91:c9:fa:58:60:18:a1:
94:a6:b9:b0:26:74:30:ef:d5:3f:58:9b:6c:1a:9a:
89:6a:bd:1d:5c:c9:48:29:37:ad:a3:28:da:7e:38:
38:60:63:7a:52:51:bc:95:38:2d:00:6c:64:80:22:
7a:8c:ca:8a:37:6c:63:d5:d3:78:37:76:31:bb:9a:
83:1d:5c:a9:ae:77:1f:99:c1:6c:10:de:d1:a1:a9:
5c:e4:09:fe:f6:1c:20:97:4f:4c:09:d8:16:61:8a:
40:92:e8:05:81:86:e9:f0:a5:5c:fe:ca:67:f6:0e:
a4:6d:78:6b:fd:66:e1:81:b5:7b:7d:31:d8:1f:96:
3c:17:2c:e2:64:2d:b5:b5:16:1d:bc:8e:0d:8a:30:
7f:18:44:b0:08:6f:5e:c1:97:7f:ce:ac:0b:32:e5:
3a:a1:4f:2a:e3:b1:58:8f:5f:71:ab:66:d1:a3:22:
71:6e:7d:8e:4e:15:0f:1c:e7:84:d0:1a:85:64:19:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:EA:C2:79:C6:7B:92:27:54:4D:44:6C:76:90:CA:FD:CB:15:6F
X509v3 Authority Key Identifier:
keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c3:6b:1c:90:3e:98:0f:f5:47:86:08:99:86:3b:1f:6d:19:
fc:3f:b3:d7:6c:ff:63:04:15:69:16:2a:b2:71:16:3f:18:b9:
87:08:59:ae:bb:f7:87:28:35:37:ad:ac:38:ee:dc:6f:b1:9a:
a1:b4:1b:4a:05:ac:90:08:b1:17:dc:87:f9:da:fe:19:bc:2e:
41:a1:4b:9f:85:4f:e8:8d:ed:c1:33:d9:08:c7:c8:5d:28:d0:
3f:9f:d1:ed:25:bd:13:5c:a3:4f:59:93:66:e1:97:10:37:dc:
75:e2:3f:c8:d4:1c:49:2a:73:e7:d0:40:62:42:fe:3a:15:17:
51:79:83:3e:ae:64:e8:e3:af:9a:ab:15:b2:1e:c7:5f:2b:0a:
3a:9f:bd:a4:45:38:02:7a:13:d0:59:58:f2:e8:e0:cb:b6:a1:
d2:e7:2c:40:7d:bf:d5:30:eb:be:93:97:7d:5a:26:37:da:67:
a3:98:b3:b0:ff:52:46:bb:72:46:25:52:5c:99:64:ab:95:3d:
f5:60:54:34:d8:61:56:6f:6d:98:52:ac:30:7c:8a:62:cd:bb:
8e:be:a2:fe:03:53:2d:02:aa:e9:19:c2:dd:43:5e:d0:4b:96:
13:f1:8a:70:fe:0d:22:84:db:e4:b1:66:7c:66:81:d8:b1:91:
5f:19:aa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:47:12 2026 by rpki-client